Integrations & Setup
Connect VirusTotal
Add your own VirusTotal API key to enrich Crucible verdicts with file and domain reputation.
Cernexa can enrich Crucible verdicts with VirusTotal file and domain reputation — coverage across 70+ engines for binaries, extensions, and models, plus reputation on the egress hosts your software contacts. Each organization brings its own key, stored encrypted and scoped to that organization only.
Add your key
- Go to Settings → Integrations & Keys.
- Find VirusTotal and click Add key.
- Paste your API key (from your VirusTotal account) and optionally a label.
- Click Verify & save.
Cernexa validates the key live against VirusTotal before saving and shows the result as a status badge:
- Connected — the key is valid and in use.
- Invalid key — VirusTotal rejected it.
- Not verified / check failed — the key was saved but couldn't be validated right now.
Once connected, only the last four characters are ever shown. Use Update to replace the key or Remove to delete it.
How keys are stored
- Encrypted at rest. Keys are sealed with AES-256-GCM; the plaintext is only decrypted server-side when a verdict is being enriched.
- Per-organization. Your key is scoped to your organization. There is no shared platform key — if you don't add one, VirusTotal enrichment is simply off for your org.
- Owner/admin only. Only organization owners and admins can view or manage integration keys; members never see the controls. Every change is recorded in the audit log with the masked key tail and status — never the secret itself.
What it changes
With VirusTotal connected, relevant artifacts pick up an additional reputation signal in their Crucible report — for example, a binary flagged by multiple engines, or a malicious egress domain. Like every Crucible signal, the contribution is itemized and explainable.